[Snyk] Upgrade: , , , react, react-dom, babel-loader, concurrently, fastify, fastify-cors, fastify-static, htm, html-webpack-plugin, react-router-dom, superagent, terser-webpack-plugin, webpack, webpack-cli, webpack-dev-server #545

WontonSam · 2024-09-19T15:12:41Z

Snyk has created this PR to upgrade multiple dependencies.

👯 The following dependencies are linked and will therefore be updated together.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

⚠️ Warning: This PR contains major version upgrade(s), and may be a breaking change.

Name	Versions	Released on

@babel/core
from 7.9.0 to 7.25.2 | 111 versions ahead of your current version | 2 months ago
on 2024-07-30
@babel/plugin-transform-runtime
from 7.9.0 to 7.25.4 | 75 versions ahead of your current version | a month ago
on 2024-08-22
@babel/preset-env
from 7.9.0 to 7.25.4 | 93 versions ahead of your current version | a month ago
on 2024-08-22
react
from 16.13.1 to 18.3.1 | 634 versions ahead of your current version
⚠️ This is a major version upgrade, and may be a breaking change | 5 months ago
on 2024-04-26
react-dom
from 16.13.1 to 18.3.1 | 634 versions ahead of your current version
⚠️ This is a major version upgrade, and may be a breaking change | 5 months ago
on 2024-04-26
babel-loader
from 8.1.0 to 9.1.3 | 15 versions ahead of your current version
⚠️ This is a major version upgrade, and may be a breaking change | a year ago
on 2023-07-07
concurrently
from 5.1.0 to 8.2.2 | 28 versions ahead of your current version
⚠️ This is a major version upgrade, and may be a breaking change | a year ago
on 2023-10-19
fastify
from 2.13.0 to 4.28.1 | 151 versions ahead of your current version
⚠️ This is a major version upgrade, and may be a breaking change | 3 months ago
on 2024-06-29
fastify-cors
from 3.0.3 to 6.0.3 | 9 versions ahead of your current version
⚠️ This is a major version upgrade, and may be a breaking change | 3 years ago
on 2022-02-23
fastify-static
from 2.6.0 to 4.6.1 | 23 versions ahead of your current version
⚠️ This is a major version upgrade, and may be a breaking change | 3 years ago
on 2022-03-18
htm
from 3.0.3 to 3.1.1 | 3 versions ahead of your current version | 2 years ago
on 2022-04-26
html-webpack-plugin
from 3.2.0 to 5.6.0 | 65 versions ahead of your current version
⚠️ This is a major version upgrade, and may be a breaking change | 9 months ago
on 2023-12-19
react-router-dom
from 5.1.2 to 6.26.1 | 180 versions ahead of your current version
⚠️ This is a major version upgrade, and may be a breaking change | a month ago
on 2024-08-15
superagent
from 5.2.2 to 10.1.0 | 34 versions ahead of your current version
⚠️ This is a major version upgrade, and may be a breaking change | a month ago
on 2024-08-24
terser-webpack-plugin
from 2.3.5 to 5.3.10 | 45 versions ahead of your current version
⚠️ This is a major version upgrade, and may be a breaking change | 9 months ago
on 2023-12-28
webpack
from 4.42.1 to 5.94.0 | 248 versions ahead of your current version
⚠️ This is a major version upgrade, and may be a breaking change | a month ago
on 2024-08-22
webpack-cli
from 3.3.11 to 5.1.4 | 41 versions ahead of your current version
⚠️ This is a major version upgrade, and may be a breaking change | a year ago
on 2023-06-07
webpack-dev-server
from 3.10.3 to 5.0.4 | 49 versions ahead of your current version
⚠️ This is a major version upgrade, and may be a breaking change | 6 months ago
on 2024-03-19

Issues fixed by the recommended upgrade:

Issue	Score	Exploit Maturity
Prototype Pollution SNYK-JS-LODASH-567746	63	Proof of Concept
Path Traversal SNYK-JS-WEBPACKDEVMIDDLEWARE-6476555	63	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-WEBSOCKETEXTENSIONS-570623	63	Proof of Concept
Prototype Pollution SNYK-JS-LOADERUTILS-3043105	63	No Known Exploit
Prototype Pollution SNYK-JS-AJV-584908	63	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-ANSIHTML-1296849	63	Proof of Concept
Prototype Pollution SNYK-JS-NODEFORGE-598677	63	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-NTHCHECK-1586032	63	Proof of Concept
Prototype Pollution SNYK-JS-INI-1048974	63	Proof of Concept
Server-side Request Forgery (SSRF) SNYK-JS-IP-6240864	63	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-ANSIREGEX-1583908	63	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-ANSIREGEX-1583908	63	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-ANSIREGEX-1583908	63	Proof of Concept
Prototype Pollution SNYK-JS-ASYNC-2441827	63	Proof of Concept
Uncontrolled resource consumption SNYK-JS-BRACES-6838727	63	Proof of Concept
Improper Verification of Cryptographic Signature SNYK-JS-BROWSERIFYSIGN-6037026	63	No Known Exploit
Improper Input Validation SNYK-JS-FOLLOWREDIRECTS-6141137	63	Proof of Concept
Prototype Pollution SNYK-JS-LOADERUTILS-3043105	63	No Known Exploit
Prototype Pollution SNYK-JS-LOADERUTILS-3043105	63	No Known Exploit
Code Injection SNYK-JS-LODASH-1040724	63	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-HTMLMINIFIER-3091181	63	Proof of Concept
Denial of Service (DoS) SNYK-JS-HTTPPROXY-569139	63	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-WS-1296835	63	Proof of Concept
Improper Verification of Cryptographic Signature SNYK-JS-NODEFORGE-2430341	63	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-PATHPARSE-1077067	63	Proof of Concept
Missing Release of Resource after Effective Lifetime SNYK-JS-INFLIGHT-6095116	63	Proof of Concept
Server-Side Request Forgery (SSRF) SNYK-JS-IP-7148531	63	Proof of Concept
Prototype Pollution SNYK-JS-JSON5-3182856	63	Proof of Concept
Prototype Pollution SNYK-JS-JSON5-3182856	63	Proof of Concept
Prototype Pollution SNYK-JS-JSON5-3182856	63	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-LOADERUTILS-3042992	63	No Known Exploit
Incomplete List of Disallowed Inputs SNYK-JS-BABELTRAVERSE-5962462	63	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-SSRI-1246392	63	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-SSRI-1246392	63	Proof of Concept
Arbitrary File Overwrite SNYK-JS-TAR-1536528	63	No Known Exploit
Arbitrary File Overwrite SNYK-JS-TAR-1536531	63	No Known Exploit
Arbitrary File Write SNYK-JS-TAR-1579147	63	No Known Exploit
Arbitrary File Write SNYK-JS-TAR-1579152	63	No Known Exploit
Arbitrary File Write SNYK-JS-TAR-1579155	63	No Known Exploit
Denial of Service (DoS) SNYK-JS-WS-7266574	63	Proof of Concept
Prototype Pollution SNYK-JS-Y18N-1021887	63	Proof of Concept
Denial of Service (DoS) SNYK-JS-DECODEURICOMPONENT-3149970	63	Proof of Concept
Prototype Pollution SNYK-JS-UNSETVALUE-2400660	63	No Known Exploit
Remote Memory Exposure SNYK-JS-DNSPACKET-1293563	63	No Known Exploit
Cryptographic Issues SNYK-JS-ELLIPTIC-571484	63	Proof of Concept
Improper Input Validation SNYK-JS-URLPARSE-2407770	63	Proof of Concept
Prototype Pollution SNYK-JS-LODASH-608086	63	Proof of Concept
Prototype Pollution SNYK-JS-LODASH-6139239	63	Proof of Concept
Inefficient Regular Expression Complexity SNYK-JS-MICROMATCH-6838728	63	No Known Exploit
Improper Verification of Cryptographic Signature SNYK-JS-NODEFORGE-2430339	63	No Known Exploit
Prototype Poisoning SNYK-JS-QS-3153490	63	Proof of Concept
Prototype Poisoning SNYK-JS-QS-3153490	63	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVER-3247795	63	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVER-3247795	63	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVER-3247795	63	Proof of Concept
Arbitrary Code Injection SNYK-JS-SERIALIZEJAVASCRIPT-570062	63	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-BROWSERSLIST-1090194	63	Proof of Concept
Denial of Service (DoS) SNYK-JS-FASTIFY-595959	63	Proof of Concept
Denial of Service (DoS) SNYK-JS-FASTIFY-596516	63	No Known Exploit
Web Cache Poisoning SNYK-JS-FINDMYWAY-1038269	63	Proof of Concept
Information Exposure SNYK-JS-FOLLOWREDIRECTS-2332181	63	Proof of Concept
Information Exposure SNYK-JS-FOLLOWREDIRECTS-6444610	63	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-GLOBPARENT-1016905	63	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-HOSTEDGITINFO-1088355	63	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-LOADERUTILS-3105943	63	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-LOADERUTILS-3042992	63	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-LOADERUTILS-3105943	63	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-LOADERUTILS-3042992	63	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-LOADERUTILS-3105943	63	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-LODASH-1018905	63	Proof of Concept
Cross-site Scripting (XSS) SNYK-JS-SERIALIZEJAVASCRIPT-6147607	63	Proof of Concept
Denial of Service (DoS) SNYK-JS-SOCKJS-575261	63	Proof of Concept
Prototype Pollution SNYK-JS-YARGSPARSER-560381	63	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-COOKIEJAR-3149984	63	Proof of Concept
Uncontrolled Resource Consumption ('Resource Exhaustion') SNYK-JS-TAR-6476909	63	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-TERSER-2806366	63	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-UGLIFYJS-1727251	63	No Known Exploit
Improper Input Validation SNYK-JS-URLPARSE-1078283	63	No Known Exploit
Open Redirect SNYK-JS-URLPARSE-1533425	63	Proof of Concept
Access Restriction Bypass SNYK-JS-URLPARSE-2401205	63	Proof of Concept
Cryptographic Issues SNYK-JS-ELLIPTIC-1064899	63	No Known Exploit
Open Redirect SNYK-JS-EXPRESS-6474509	63	No Known Exploit
Authorization Bypass Through User-Controlled Key SNYK-JS-URLPARSE-2412697	63	Proof of Concept
Open Redirect SNYK-JS-NODEFORGE-2330875	63	Proof of Concept
Prototype Pollution SNYK-JS-NODEFORGE-2331908	63	No Known Exploit
Improper Verification of Cryptographic Signature SNYK-JS-NODEFORGE-2430337	63	No Known Exploit
Open Redirect SNYK-JS-FASTIFYSTATIC-1728398	63	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-TAR-1536758	63	No Known Exploit
Regular Expression Denial of Service (ReDoS) npm:debug:20170905	63	Proof of Concept
Regular Expression Denial of Service (ReDoS) npm:debug:20170905	63	Proof of Concept
Improper Verification of Cryptographic Signature SNYK-JS-ELLIPTIC-7577916	63	Proof of Concept
Improper Verification of Cryptographic Signature SNYK-JS-ELLIPTIC-7577917	63	Proof of Concept
Improper Verification of Cryptographic Signature SNYK-JS-ELLIPTIC-7577918	63	Proof of Concept
Information Exposure SNYK-JS-EVENTSOURCE-2823375	63	Proof of Concept
Authorization Bypass SNYK-JS-URLPARSE-2407759	63	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-MINIMATCH-3050818	63	No Known Exploit
Information Exposure SNYK-JS-FOLLOWREDIRECTS-2396346	63	No Known Exploit
Prototype Pollution SNYK-JS-MINIMIST-2429795	63	Proof of Concept

Release notes

Package name: @babel/core

7.25.2 - 2024-07-30
v7.25.2 (2024-07-30)

🐛 Bug Fix
- babel-core, babel-traverse
  - #16695 Ensure that requeueComputedKeyAndDecorators is available (@ nicolo-ribaudo)
Committers: 2
- Huáng Jùnliàng (@ JLHwung)
- Nicolò Ribaudo (@ nicolo-ribaudo)
7.24.9 - 2024-07-15
v7.24.9 (2024-07-15)

🐛 Bug Fix
- babel-core, babel-standalone
  - #16639 Avoid require() call in @ babel/standalone bundle (@ nicolo-ribaudo)
- babel-types
  - #16638 fix: provide legacy typings for TS < 4.1 (@ JLHwung)
💅 Polish
- babel-generator, babel-plugin-transform-optional-chaining
  - #16617 Avoid extra parens in TS as/satisfies (@ nicolo-ribaudo)
🏠 Internal
- babel-helper-module-transforms
  - #16629 Lazy top-level initializations for module transforms (@ guybedford)
Committers: 5
- Babel Bot (@ babel-bot)
- Guy Bedford (@ guybedford)
- Huáng Jùnliàng (@ JLHwung)
- Nicolò Ribaudo (@ nicolo-ribaudo)
- @ liuxingbaoyu
7.24.8 - 2024-07-11
7.24.7 - 2024-06-05
7.24.6 - 2024-05-24
7.24.5 - 2024-04-29
7.24.4 - 2024-04-03
7.24.3 - 2024-03-20
7.24.1 - 2024-03-19
7.24.0 - 2024-02-28
7.23.9 - 2024-01-25
7.23.7 - 2023-12-29
7.23.6 - 2023-12-11
7.23.5 - 2023-11-29
7.23.3 - 2023-11-09
7.23.2 - 2023-10-12
7.23.0 - 2023-09-25
7.22.20 - 2023-09-16
7.22.19 - 2023-09-14
7.22.18 - 2023-09-14
7.22.17 - 2023-09-08
7.22.15 - 2023-09-04
7.22.11 - 2023-08-24
7.22.10 - 2023-08-07
7.22.9 - 2023-07-12
7.22.8 - 2023-07-06
7.22.7 - 2023-07-06
7.22.6 - 2023-07-04
7.22.5 - 2023-06-08
7.22.1 - 2023-05-26
7.22.0 - 2023-05-26
7.21.8 - 2023-05-02
7.21.5 - 2023-04-28
7.21.4 - 2023-03-31
7.21.4-esm.4 - 2023-04-04
7.21.4-esm.3 - 2023-04-04
7.21.4-esm.2 - 2023-04-04
7.21.4-esm.1 - 2023-04-04
7.21.4-esm - 2023-04-04
7.21.3 - 2023-03-14
7.21.0 - 2023-02-20
7.20.12 - 2023-01-04
7.20.7 - 2022-12-22
7.20.5 - 2022-11-28
7.20.2 - 2022-11-04
7.19.6 - 2022-10-20
7.19.3 - 2022-09-27
7.19.1 - 2022-09-14
7.19.0 - 2022-09-05
7.18.13 - 2022-08-22
7.18.10 - 2022-08-01
7.18.9 - 2022-07-18
7.18.6 - 2022-06-27
7.18.5 - 2022-06-13
7.18.2 - 2022-05-25
7.18.0 - 2022-05-19
7.17.12 - 2022-05-16
7.17.10 - 2022-04-29
7.17.9 - 2022-04-06
7.17.8 - 2022-03-18
7.17.7 - 2022-03-14
7.17.5 - 2022-02-17
7.17.4 - 2022-02-15
7.17.3 - 2022-02-15
7.17.2 - 2022-02-08
7.17.0 - 2022-02-02
7.16.12 - 2022-01-22
7.16.10 - 2022-01-19
7.16.7 - 2021-12-31
7.16.5 - 2021-12-13
7.16.0 - 2021-10-29
7.15.8 - 2021-10-06
7.15.5 - 2021-09-04
7.15.4 - 2021-09-02
7.15.0 - 2021-08-04
7.14.8 - 2021-07-20
7.14.6 - 2021-06-14
7.14.5 - 2021-06-09
7.14.3 - 2021-05-17
7.14.2 - 2021-05-12
7.14.0 - 2021-04-29
7.13.16 - 2021-04-20
7.13.15 - 2021-04-08
7.13.14 - 2021-03-29
7.13.13 - 2021-03-26
7.13.10 - 2021-03-08
7.13.8 - 2021-02-26
7.13.1 - 2021-02-23
7.13.0 - 2021-02-22
7.12.17 - 2021-02-18
7.12.16 - 2021-02-11
7.12.13 - 2021-02-03
7.12.10 - 2020-12-09
7.12.9 - 2020-11-24
7.12.8 - 2020-11-23
7.12.7 - 2020-11-20
7.12.3 - 2020-10-16
7.12.1 - 2020-10-15
7.12.0 - 2020-10-14
7.11.6 - 2020-09-03
7.11.5 - 2020-08-31
7.11.4 - 2020-08-20
7.11.1 - 2020-08-04
7.11.0 - 2020-07-30
7.10.5 - 2020-07-14
7.10.4 - 2020-06-30
7.10.3 - 2020-06-19
7.10.2 - 2020-05-30
7.10.1 - 2020-05-27
7.10.0 - 2020-05-26
7.9.6 - 2020-04-29
7.9.0 - 2020-03-20

from @babel/core GitHub release notes

Package name: @babel/plugin-transform-runtime

7.25.4 - 2024-08-22
v7.25.4 (2024-08-22)

🐛 Bug Fix
- babel-traverse
  - #16756 fix: Skip computed key when renaming (@ liuxingbaoyu)
- babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators
  - #16755 fix: Decorator 2018-09 may throw an exception (@ liuxingbaoyu)
- babel-types
  - #16710 Visit AST fields nodes according to their syntactical order (@ nicolo-ribaudo)
- babel-generator
  - #16709 Print semicolon after TS export namespace as A (@ nicolo-ribaudo)
💅 Polish
- babel-generator, babel-plugin-proposal-decorators, babel-plugin-proposal-destructuring-private, babel-plugin-proposal-pipeline-operator, babel-plugin-transform-class-properties, babel-plugin-transform-destructuring, babel-plugin-transform-optional-chaining, babel-plugin-transform-private-methods, babel-plugin-transform-private-property-in-object, babel-plugin-transform-typescript, babel-runtime-corejs2, babel-runtime, babel-traverse
  - #16722 Avoid unnecessary parens around sequence expressions (@ nicolo-ribaudo)
- babel-generator, babel-plugin-transform-class-properties
  - #16714 Avoid unnecessary parens around exported arrow functions (@ nicolo-ribaudo)
- babel-generator, babel-plugin-proposal-decorators, babel-plugin-proposal-destructuring-private, babel-plugin-transform-object-rest-spread
  - #16712 Avoid printing unnecessary parens around object destructuring (@ nicolo-ribaudo)
🔬 Output optimization
- babel-generator
  - #16740 Avoid extra spaces between comments/regexps in compact mode (@ nicolo-ribaudo)
Committers: 4
- Babel Bot (@ babel-bot)
- Huáng Jùnliàng (@ JLHwung)
- Nicolò Ribaudo (@ nicolo-ribaudo)
- @ liuxingbaoyu
7.24.7 - 2024-06-05
7.24.6 - 2024-05-24
7.24.3 - 2024-03-20
7.24.1 - 2024-03-19
7.24.0 - 2024-02-28
7.23.9 - 2024-01-25
7.23.7 - 2023-12-29
7.23.6 - 2023-12-11
7.23.4 - 2023-11-20
7.23.3 - 2023-11-09
7.23.2 - 2023-10-11
7.22.15 - 2023-09-04
7.22.10 - 2023-08-07
7.22.9 - 2023-07-12
7.22.7 - 2023-07-06
7.22.6 - 2023-07-04
7.22.5 - 2023-06-08
7.22.4 - 2023-05-29
7.22.2 - 2023-05-26
7.22.0 - 2023-05-26
7.21.4 - 2023-03-31
7.21.4-esm.4 - 2023-04-04
7.21.4-esm.3 - 2023-04-04
7.21.4-esm.2 - 2023-04-04
7.21.4-esm.1 - 2023-04-04
7.21.4-esm - 2023-04-04
7.21.0 - 2023-02-20
7.19.6 - 2022-10-20
7.19.1 - 2022-09-14
7.18.10 - 2022-08-01
7.18.9 - 2022-07-18
7.18.6 - 2022-06-27
7.18.5 - 2022-06-13
7.18.2 - 2022-05-25
7.18.0 - 2022-05-19
7.17.12 - 2022-05-16
7.17.10 - 2022-04-29
7.17.0 - 2022-02-02
7.16.10 - 2022-01-19
7.16.8 - 2022-01-10
7.16.7 - 2021-12-31
7.16.5 - 2021-12-13
7.16.4 - 2021-11-16
7.16.0 - 2021-10-29
7.15.8 - 2021-10-06
7.15.0 - 2021-08-04
7.14.5 - 2021-06-09
7.14.3 - 2021-05-17
7.14.2 - 2021-05-12
7.13.15 - 2021-04-08
7.13.10 - 2021-03-08
7.13.9 - 2021-03-01
7.13.8 - 2021-02-26
7.13.7 - 2021-02-24
7.13.6 - 2021-02-23
7.13.5 - 2021-02-23
7.13.4 - 2021-02-23
7.13.2 - 2021-02-23
7.13.1 - 2021-02-23
7.13.0 - 2021-02-22
7.12.17 - 2021-02-18
7.12.15 - 2021-02-04
7.12.13 - 2021-02-03
7.12.10 - 2020-12-09
7.12.1 - 2020-10-15
7.12.0 - 2020-10-14
7.11.5 - 2020-08-31
7.11.0 - 2020-07-30
7.10.5 - 2020-07-14
7.10.4 - 2020-06-30
7.10.3 - 2020-06-19
7.10.1 - 2020-05-27
7.10.0 - 2020-05-26
7.9.6 - 2020-04-29
7.9.0 - 2020-03-20

from @babel/plugin-transform-runtime GitHub release notes

Package name: @babel/preset-env

7.25.4 - 2024-08-22
v7.25.4 (2024-08-22)

🐛 Bug Fix
- babel-traverse
  - #16756 fix: Skip computed key when renaming (@ liuxingbaoyu)
- babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators
  - #16755 fix: Decorator 2018-09 may throw an exception (@ liuxingbaoyu)
- babel-types
  - #16710 Visit AST fields nodes according to their syntactical order (@ nicolo-ribaudo)
- babel-generator
  - #16709 Print semicolon after TS export namespace as A (@ nicolo-ribaudo)
💅 Polish
- babel-generator, babel-plugin-proposal-decorators, babel-plugin-proposal-destructuring-private, babel-plugin-proposal-pipeline-operator, babel-plugin-transform-class-properties, babel-plugin-transform-destructuring, babel-plugin-transform-optional-chaining, babel-plugin-transform-private-methods, babel-plugin-transform-private-property-in-object, babel-plugin-transform-typescript, babel-runtime-corejs2, babel-runtime, babel-traverse
  - #16722 Avoid unnecessary parens around sequence expressions (@ nicolo-ribaudo)
- babel-generator, babel-plugin-transform-class-properties
  - #16714 Avoid unnecessary parens around exported arrow functions (@ nicolo-ribaudo)
- babel-generator, babel-plugin-proposal-decorators, babel-plugin-proposal-destructuring-private, babel-plugin-transform-object-rest-spread
  - #16712 Avoid printing unnecessary parens around object destructuring (@ nicolo-ribaudo)
🔬 Output optimization
- babel-generator
  - #16740 Avoid extra spaces between comments/regexps in compact mode (@ nicolo-ribaudo)
Committers: 4
- Babel Bot (@ babel-bot)
- Huáng Jùnliàng (@ JLHwung)
- Nicolò Ribaudo (@ nicolo-ribaudo)
- @ liuxingbaoyu
7.25.3 - 2024-07-31
v7.25.3 (2024-07-31)

🐛 Bug Fix
- babel-plugin-bugfix-firefox-class-in-computed-class-key, babel-traverse
  - #16699 Avoid validating visitors produced by traverse.visitors.merge (@ nicolo-ribaudo)
🏠 Internal
- babel-parser
  - #16688 Add @ babel/types as a dependency of @ babel/parser (@ nicolo-ribaudo)
Committers: 2
- Huáng Jùnliàng (@ JLHwung)
- Nicolò Ribaudo (@ nicolo-ribaudo)
7.25.2 - 2024-07-30
v7.25.2 (2024-07-30)

🐛 Bug Fix
- babel-core, babel-traverse
  - #16695 Ensure that requeueComputedKeyAndDecorators is available (@ nicolo-ribaudo)
Committers: 2
- Huáng Jùnliàng (@ JLHwung)
- Nicolò Ribaudo (@ nicolo-ribaudo)
7.25.0 - 2024-07-26
v7.25.0 (2024-07-26)

Thanks @ davidtaylorhq and @ slatereax for your first PR!

You can find the release blog post with some highlights at https://babeljs.io/blog/2024/07/26/7.25.0.

👓 Spec Compliance
- babel-helpers, babel-plugin-proposal-explicit-resource-management, babel-runtime-corejs3
  - #16537 await using normative updates (@ JLHwung)
- babel-plugin-transform-typescript
  - #16602 Ensure enum members syntactically determinable to be strings do not get reverse mappings (@ liuxingbaoyu)
🚀 New Feature
- babel-helper-create-class-features-plugin, babel-helper-function-name, babel-helper-plugin-utils, babel-helper-wrap-function, babel-plugin-bugfix-safari-class-field-initializer-scope, babel-plugin-bugfix-safari-id-destructuring-collision-in-function-expression, babel-plugin-transform-classes, babel-plugin-transform-function-name, babel-preset-env, babel-traverse, babel-types
  - #16658 Move ensureFunctionName to NodePath.prototype (@ nicolo-ribaudo)
- babel-helper-hoist-variables, babel-helper-plugin-utils, babel-plugin-proposal-async-do-expressions, babel-plugin-transform-modules-systemjs, babel-traverse
  - #16644 Move hoistVariables to Scope.prototype (@ nicolo-ribaudo)
- babel-helper-create-class-features-plugin, babel-helper-module-transforms, babel-helper-plugin-utils, babel-helper-split-export-declaration, babel-plugin-transform-classes, babel-traverse, babel-types
  - #16645 Move splitExportDeclaration to NodePath.prototype (@ nicolo-ribaudo)
- babel-helper-create-class-features-plugin, babel-helper-environment-visitor, babel-helper-module-transforms, babel-helper-plugin-utils, babel-helper-remap-async-to-generator, babel-helper-replace-supers, babel-plugin-bugfix-firefox-class-in-computed-class-key, babel-plugin-bugfix-v8-static-class-fields-redefine-readonly, babel-plugin-transform-async-generator-functions, babel-plugin-transform-classes, babel-traverse
  - #16649 Move environment-visitor helper into @ babel/traverse (@ nicolo-ribaudo)
- babel-core, babel-parser
  - #16480 Expose wether a module has TLA or not as .extra.async (@ nicolo-ribaudo)
- babel-compat-data, babel-plugin-bugfix-safari-class-field-initializer-scope, babel-preset-env
  - #16569 Introduce bugfix-safari-class-field-initializer-scope (@ davidtaylorhq)
- babel-plugin-transform-block-scoping, babel-traverse, babel-types
  - #16551 Add NodePath#getAssignmentIdentifiers (@ JLHwung)
- babel-helper-import-to-platform-api, babel-plugin-proposal-json-modules
  - #16579 Add uncheckedRequire option for JSON imports to CJS (@ nicolo-ribaudo)
- babel-helper-transform-fixture-test-runner, babel-node
  - #16642 Allow using custom config in babel-node --eval (@ slatereax)
- babel-compat-data, babel-helper-create-regexp-features-plugin, babel-plugin-proposal-duplicate-named-capturing-groups-regex, babel-plugin-transform-duplicate-named-capturing-groups-regex, babel-preset-env, babel-standalone
  - #16445 Add duplicate-named-capturing-groups-regex to preset-env (@ JLHwung)
🐛 Bug Fix
- babel-generator
  - #16678 Print parens around as expressions on the LHS (@ nicolo-ribaudo)
- babel-template, babel-types
  - #15286 fix: Props are lost when the template replaces the node (@ liuxingbaoyu)
🏠 Internal
- Other
  - #16674 bump gulp to 5 (@ JLHwung)
- babel-generator
  - #16651 Simplify the printing logic for ( before ambiguous tokens (@ nicolo-ribaudo)
- babel-helper-function-name, babel-plugin-transform-arrow-functions, babel-plugin-transform-function-name, babel-preset-env, babel-traverse
  - #16652 Simplify helper-function-name logic (@ nicolo-ribaudo)
🏃‍♀️ Performance
- babel-parser, babel-plugin-proposal-pipeline-operator
  - #16461 Some minor parser performance improvements for ts (@ liuxingbaoyu)
🔬 Output optimization
- babel-plugin-transform-classes
  - #16670 Reduce redundant assertThisInitialized (@ liuxingbaoyu)
- babel-helper-create-class-features-plugin, babel-helper-replace-supers, babel-helpers, babel-plugin-proposal-decorators, babel-plugin-transform-class-properties, babel-plugin-transform-classes, babel-plugin-transform-exponentiation-operator, babel-plugin-transform-object-super, babel-plugin-transform-private-methods, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime
  - #16374 Improve super.x output (@ liuxingbaoyu)
- babel-plugin-transform-class-properties, babel-plugin-transform-classes
  - #16656 Simplify output for anonymous classes with no methods (@ nicolo-ribaudo)
Committers: 6
- Artem (@ slatereax)
- Babel Bot (@ babel-bot)
- David Taylor (@ davidtaylorhq)
- Huáng Jùnliàng (@ JLHwung)
- Nicolò Ribaudo (@ nicolo-ribaudo)
- @ liuxingbaoyu
7.24.8 - 2024-07-11
7.24.7 - 2024-06-0...

Snyk has created this PR to upgrade: - @babel/core from 7.9.0 to 7.25.2. See this package in npm: https://www.npmjs.com/package/@babel/core - @babel/plugin-transform-runtime from 7.9.0 to 7.25.4. See this package in npm: https://www.npmjs.com/package/@babel/plugin-transform-runtime - @babel/preset-env from 7.9.0 to 7.25.4. See this package in npm: https://www.npmjs.com/package/@babel/preset-env - react from 16.13.1 to 18.3.1. See this package in npm: https://www.npmjs.com/package/react - react-dom from 16.13.1 to 18.3.1. See this package in npm: https://www.npmjs.com/package/react-dom - babel-loader from 8.1.0 to 9.1.3. See this package in npm: https://www.npmjs.com/package/babel-loader - concurrently from 5.1.0 to 8.2.2. See this package in npm: https://www.npmjs.com/package/concurrently - fastify from 2.13.0 to 4.28.1. See this package in npm: https://www.npmjs.com/package/fastify - fastify-cors from 3.0.3 to 6.0.3. See this package in npm: https://www.npmjs.com/package/fastify-cors - fastify-static from 2.6.0 to 4.6.1. See this package in npm: https://www.npmjs.com/package/fastify-static - htm from 3.0.3 to 3.1.1. See this package in npm: https://www.npmjs.com/package/htm - html-webpack-plugin from 3.2.0 to 5.6.0. See this package in npm: https://www.npmjs.com/package/html-webpack-plugin - react-router-dom from 5.1.2 to 6.26.1. See this package in npm: https://www.npmjs.com/package/react-router-dom - superagent from 5.2.2 to 10.1.0. See this package in npm: https://www.npmjs.com/package/superagent - terser-webpack-plugin from 2.3.5 to 5.3.10. See this package in npm: https://www.npmjs.com/package/terser-webpack-plugin - webpack from 4.42.1 to 5.94.0. See this package in npm: https://www.npmjs.com/package/webpack - webpack-cli from 3.3.11 to 5.1.4. See this package in npm: https://www.npmjs.com/package/webpack-cli - webpack-dev-server from 3.10.3 to 5.0.4. See this package in npm: https://www.npmjs.com/package/webpack-dev-server See this project in Snyk: https://app.snyk.io/org/cachiman/project/0151c8e1-75ff-44d7-be64-2b4aa8431774?utm_source=github&utm_medium=referral&page=upgrade-pr

google-cla · 2024-09-19T15:12:46Z

Thanks for your pull request! It looks like this may be your first contribution to a Google open source project. Before we can look at your pull request, you'll need to sign a Contributor License Agreement (CLA).

View this failed invocation of the CLA check for more information.

For the most up to date status, view the checks section at the bottom of the pull request.

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

[Snyk] Upgrade: , , , react, react-dom, babel-loader, concurrently, fastify, fastify-cors, fastify-static, htm, html-webpack-plugin, react-router-dom, superagent, terser-webpack-plugin, webpack, webpack-cli, webpack-dev-server #545

[Snyk] Upgrade: , , , react, react-dom, babel-loader, concurrently, fastify, fastify-cors, fastify-static, htm, html-webpack-plugin, react-router-dom, superagent, terser-webpack-plugin, webpack, webpack-cli, webpack-dev-server #545

WontonSam commented Sep 19, 2024

v7.25.2 (2024-07-30)

🐛 Bug Fix

Committers: 2

v7.24.9 (2024-07-15)

🐛 Bug Fix

💅 Polish

🏠 Internal

Committers: 5

v7.25.4 (2024-08-22)

🐛 Bug Fix

💅 Polish

🔬 Output optimization

Committers: 4

v7.25.4 (2024-08-22)

🐛 Bug Fix

💅 Polish

🔬 Output optimization

Committers: 4

v7.25.3 (2024-07-31)

🐛 Bug Fix

🏠 Internal

Committers: 2

v7.25.2 (2024-07-30)

🐛 Bug Fix

Committers: 2

v7.25.0 (2024-07-26)

👓 Spec Compliance

🚀 New Feature

🐛 Bug Fix

🏠 Internal

🏃‍♀️ Performance

🔬 Output optimization

Committers: 6

google-cla bot commented Sep 19, 2024

[Snyk] Upgrade: , , , react, react-dom, babel-loader, concurrently, fastify, fastify-cors, fastify-static, htm, html-webpack-plugin, react-router-dom, superagent, terser-webpack-plugin, webpack, webpack-cli, webpack-dev-server #545

Are you sure you want to change the base?

[Snyk] Upgrade: , , , react, react-dom, babel-loader, concurrently, fastify, fastify-cors, fastify-static, htm, html-webpack-plugin, react-router-dom, superagent, terser-webpack-plugin, webpack, webpack-cli, webpack-dev-server #545

Conversation

WontonSam commented Sep 19, 2024

Snyk has created this PR to upgrade multiple dependencies.

Issues fixed by the recommended upgrade:

v7.25.2 (2024-07-30)

🐛 Bug Fix

Committers: 2

v7.24.9 (2024-07-15)

🐛 Bug Fix

💅 Polish

🏠 Internal

Committers: 5

v7.25.4 (2024-08-22)

🐛 Bug Fix

💅 Polish

🔬 Output optimization

Committers: 4

v7.25.4 (2024-08-22)

🐛 Bug Fix

💅 Polish

🔬 Output optimization

Committers: 4

v7.25.3 (2024-07-31)

🐛 Bug Fix

🏠 Internal

Committers: 2

v7.25.2 (2024-07-30)

🐛 Bug Fix

Committers: 2

v7.25.0 (2024-07-26)

👓 Spec Compliance

🚀 New Feature

🐛 Bug Fix

🏠 Internal

🏃‍♀️ Performance

🔬 Output optimization

Committers: 6

google-cla bot commented Sep 19, 2024